This looks like a purpose build website for websec/compliance training. It has "demo" written all over it. I think op got bamboozled.